CWE-918Vulnerability type
WordPress SSRF vulnerabilities (page 1287)
Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.5Unauthenticated Arbitrary File Deletion
ARforms
≤3.7.1Update to 4.0
- Medium5.5Authenticated (Admin+) Cross-Site Scripting
Client Dash
≤2.2.0No patch available
- Medium6.1Cross-Site Scripting
LIQUID SPEECH BALLOON
<1.0.7Update to 1.0.7
- High8.0Authenticated (Admin+) SQL Injection
Contact Form Widget – Responsive Contact Form, Query Form & Form Builder
≤1.3.8Update to 1.3.9
- High7.2Missing Authorization to Stored Cross-Site Scripting
ShopWP
≤2.0.4Update to 2.0.5
- Medium6.1Unauthenticated Stored Cross-Site Scripting
Download Plugins and Themes in ZIP from Dashboard
<1.6.0Update to 1.6.0
- Critical9.8Unauthenticated SQL Injection
Event Expresso Free
≤3.1.37.12Update to 3.1.37.14 or 3.1.37.14L
- Medium6.1Stored Cross-Site Scripting
Visualizer – Tables & Charts Manager with Built-in AI Generator
≤3.3.0Update to 3.3.1
- Critical9.3Server-Side Request Forgery
Visualizer – Tables & Charts Manager with Built-in AI Generator
≤3.3.0Update to 3.3.1
- High7.5Authorization Bypass
GiveWP – Donation Plugin and Fundraising Platform
≤2.5.4Update to 2.5.5
- Medium5.5Authenticated Stored Cross-Site Scripting
Firelight Lightbox
≤1.8.17Update to 1.8.18
- High7.2Stored Cross-Site Scripting
Rich Reviews by Starfish
≤1.7.4Update to 1.8.0
- Medium6.1Real Estate WordPress Theme < 4.2 - Cross-Site Scripting
Zoner - Real Estate WordPress Theme
<4.2Update to 4.2
- High7.2Stored Cross Site Scripting
DELUCKS SEO
≤2.1.7Update to 2.1.8
- Medium6.5Unauthenticated Settings Import/Export
Motors – Car Dealership & Classified Listings Plugin
<1.4.1Update to 1.4.1
- Medium6.1Cross-Site Scripting
Ultimate FAQ Accordion Plugin
<1.8.25Update to 1.8.25
- Medium6.1Stored Cross-Site Scripting
Motors – Car Dealership & Classified Listings Plugin
<1.4.1Update to 1.4.1
- Critical9.1Unauthenticated Options Import/Export
Ultimate FAQ Accordion Plugin
<1.8.25Update to 1.8.25
- High7.4CSV Injection
Export Users to CSV
<1.4Update to 1.4
- Medium6.4Authenticated Cross-Site Scripting
Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts
<2.2.9Update to 2.2.9
- Medium5.3Information Disclosure
Easy!Appointments
≤1.3.2Update to 1.4.0
- Medium6.1Cross-Site Scripting via custom-write-panel-id Parameter
Magic Fields
≤1.7.1Update to 1.7.2
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
WP Server Log Viewer
≤1.0No patch available
- Medium6.1Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter
Magic Fields
≤1.7.1Update to 1.7.2
- High8.8Authenticated SQL Injection
SlickQuiz
≤1.3.7.1No patch available
- Medium6.1Stored Cross-Site Scripting
SlickQuiz
≤1.3.7.1No patch available
- Medium6.1Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter
Magic Fields
≤1.7.1Update to 1.7.2
- Medium6.1Cross-Site Scripting
Checklist
≤1.1.8Update to 1.1.9
- Critical9.8Unauthenticated Arbitrary File Read
Access Governance for WordPress (aka AAM)
<5.9.9Update to 5.9.9
- Critical9.8Stored Cross-Site Scripting via Import
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
<3.35.0Update to 3.35.0